For engineers and security teams driving fast and secure software supply chains
☆88Feb 6, 2023Updated 3 years ago
Alternatives and similar repositories for blueprint-securesoftwarepipeline
Users that are interested in blueprint-securesoftwarepipeline are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Trust Dexter to ensure that all your images are pinned by digest for better security☆31Nov 8, 2023Updated 2 years ago
- SLSA level 3 action☆12Apr 26, 2024Updated 2 years ago
- Overview of philips-labs helm charts☆16Oct 19, 2026Updated 2 weeks ago
- A CLI for Kubernetes workload identity☆11Updated this week
- A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod☆11Jan 20, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Microsoft Azure VM Guest Linux Patch Extension☆12Oct 23, 2026Updated last week
- Modular attestation monorepo for cilock — 30+ attestors, 9 signers, the rookery builder for custom binaries. The source of the cilock CLI…☆10Oct 22, 2026Updated last week
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆210Sep 12, 2026Updated last month
- Powershell module to fully automate your Palo Alto Networks NGTS and CyberArk Certificate Manager Self-Hosted/SaaS platforms!☆48Updated this week
- A CLI used to work with the Wolfi OSS project☆76Updated this week
- How small can a Java application container image be☆21Feb 17, 2023Updated 3 years ago
- A compilation of resources in the software supply chain security domain, with emphasis on open source☆381Jun 7, 2026Updated 4 months ago
- Simplify Kubernetes Secrets Management with Dockhand Secrets Operator☆19Sep 2, 2026Updated 2 months ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆615Oct 26, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A kubectl plugin to run kubectl macro that wraps a set of kubectl calls into one command to be run many times.☆11Jun 28, 2021Updated 5 years ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆121Oct 21, 2026Updated last week
- ☆34Updated this week
- Witness Examples☆12Feb 27, 2024Updated 2 years ago
- ☆36Dec 10, 2020Updated 5 years ago
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆11Oct 26, 2026Updated last week
- Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts☆19Sep 11, 2026Updated last month
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 10 months ago
- Ressources for the regular meeting of distribution security teams☆10Sep 28, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.☆140Jul 12, 2022Updated 4 years ago
- [ARCHIVED] A web-based LDAP user management system written in PHP.☆14Mar 12, 2022Updated 4 years ago
- Automating Openshift Deployment on VMware using Static IPs where DHCP is not a option.☆10Apr 20, 2020Updated 6 years ago
- Hope this cheat sheet helps you with Android pentesting and configuring Android devices!☆11Jan 29, 2025Updated last year
- A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.☆45Oct 26, 2026Updated last week
- Kubernetes tools in a "distroless" container☆13Oct 30, 2023Updated 3 years ago
- Create a Lean Canvas out of a markdown list☆13May 25, 2025Updated last year
- Attack Tree GPT is a C# program that uses Azure's Computer Vision and Azure OpenAI's GPT-4 to generate attack trees for AWS services as w…☆14Jun 19, 2024Updated 2 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆83Dec 14, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆10Mar 31, 2022Updated 4 years ago
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆89Updated this week
- Go client SDK and command line utility designed to simplify integrations by automating key generation and certificate enrollment using Ve…☆107Updated this week
- ☆11Sep 2, 2026Updated 2 months ago
- go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems☆14Sep 28, 2023Updated 3 years ago
- A web based tool for working with CycloneDX BOMs☆49Feb 10, 2026Updated 8 months ago
- Rust implementation of OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆30Jul 29, 2025Updated last year